last executing test programs: 1m16.121448274s ago: executing program 0 (id=244): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) 1m15.987286458s ago: executing program 0 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x', 0x2) 1m15.921120919s ago: executing program 0 (id=250): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./control\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r0, 0x8, r3) rt_sigtimedwait(&(0x7f0000000040)={[0xfbffffffffff7ff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa2000b60) rmdir(&(0x7f00000000c0)='./control\x00') 1m15.000146762s ago: executing program 0 (id=257): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tkill(r0, 0x13) waitid(0x1, r0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0xe, 0x3, 0x0, 0x9, 0x1, 0x9, 0xfa11, 0xfeffffff}, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) 1m13.659957856s ago: executing program 0 (id=276): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) 1m11.926787s ago: executing program 0 (id=286): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) 1m11.601507448s ago: executing program 32 (id=286): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) 58.235852554s ago: executing program 5 (id=289): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./control\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(0x0, r1, 0x0) r2 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r0, 0x8, r3) rt_sigtimedwait(&(0x7f0000000040)={[0xfbffffffffff7ff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa2000b60) rmdir(&(0x7f00000000c0)='./control\x00') 57.305373538s ago: executing program 5 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 57.172266231s ago: executing program 5 (id=427): syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005800000000002f90780000e000e0000001248086dd0000000010000800000086dd080088be00000000100040000100000000000000080022eb0000000120000000020000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001e00010026bd7000fedbdf2507"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) 56.556396946s ago: executing program 5 (id=434): unshare(0x28000600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 56.40355316s ago: executing program 33 (id=434): unshare(0x28000600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 4.648602943s ago: executing program 4 (id=784): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xfe}, {}, @ext={0x0, 0x0}}], 0x38) 4.552135275s ago: executing program 4 (id=786): syz_io_uring_setup(0x7fe1, &(0x7f0000001600)={0x0, 0xb38f, 0x800, 0x2, 0x203}, &(0x7f0000001680), 0x0, 0x0) migrate_pages(0x0, 0xf8, &(0x7f0000000200)=0xb9b, &(0x7f0000000240)=0x1) 4.487790997s ago: executing program 4 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000280), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_u', 0x7) close(r4) 4.428877959s ago: executing program 4 (id=788): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x24040400) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4) 4.33310509s ago: executing program 4 (id=789): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 3.304399596s ago: executing program 2 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) 3.116482011s ago: executing program 1 (id=798): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000280), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_u', 0x7) close(r4) 3.003733844s ago: executing program 2 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x50, &(0x7f00000000c0)={0x11, 0x4, r2, 0x1, 0x84, 0x6, @local}, 0x14) 3.003081804s ago: executing program 1 (id=802): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0), 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.833872758s ago: executing program 2 (id=804): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.76502251s ago: executing program 1 (id=806): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000100000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 2.616320953s ago: executing program 2 (id=809): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x39, 0x4) 2.548189896s ago: executing program 1 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10131, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x7, 0x12) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 2.36106776s ago: executing program 2 (id=812): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x1, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) 2.140284956s ago: executing program 2 (id=814): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 1.484312262s ago: executing program 6 (id=820): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.343027906s ago: executing program 6 (id=821): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @local}}) 1.276311697s ago: executing program 4 (id=822): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tkill(r0, 0x13) waitid(0x1, r0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0xe, 0x3, 0x0, 0x9, 0x1, 0x9, 0xfa11, 0xfeffffff}, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) 1.140350111s ago: executing program 6 (id=823): mount$nfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000380), 0x0, &(0x7f0000000280)={[{'\x02\x00\x00\x00)%A\x06\xa3\xbdv:\xc8\x10\xdaZ\x84r\xf5.W4\xf5\xcc\x91kB:\xc4\xda\xaa\x99oF\x90\x94@>\x1f\xbf\xcb\x84\xa7_\x80\xce\xf7\xff\xadK\x89\xf4\x18P\xa2\x8d\"\b\xcc!x\x8d>.!\xb4\xb7\xca\x7fxwb\xa6g\xd0\x1a\x8d\x9b[aC\x18sbASm\xc1\xc1\xb1\a\xa4H\xe5\x97\x9eU\xdd\x16\xd7\xef\x8a\f\xc5\xc2\xa5\xc9\x85\xcc\xf9\rH\x11H\r\xbe$qZ\xa8\x8b\x87\x85\x9c&\x16\x8b<+\x985\x14UD\x83|\x0e\xcb/'}]}) 1.086134783s ago: executing program 6 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_LOG_PREFIX={0x10, 0x2, 0x1, 0x0, '!}*\xdb!/\xc9#.-*\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 904.525977ms ago: executing program 6 (id=825): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 788.24516ms ago: executing program 3 (id=826): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000280), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_u', 0x7) close(r4) 712.833822ms ago: executing program 6 (id=827): open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x28c540, 0x0) socket(0x1e, 0x80005, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 671.524353ms ago: executing program 3 (id=828): socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffff9c, &(0x7f0000001600), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000200)={0x26, 0x4, 0x0, 0x1, 0x800, 0x8, 0x2, 0x6}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x3, 0x1, 0xf75a}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 479.900188ms ago: executing program 3 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x1', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004\n', 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000280), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r4) 364.975981ms ago: executing program 3 (id=830): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x20000) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 180.200795ms ago: executing program 3 (id=831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100d}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 88.570538ms ago: executing program 1 (id=832): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.566ms ago: executing program 3 (id=833): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) 0s ago: executing program 1 (id=834): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000008}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): CONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.953171][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.968068][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.976729][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.985914][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.994723][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.005366][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.013553][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.029821][ T4187] device veth0_vlan entered promiscuous mode [ 64.053762][ T4187] device veth1_vlan entered promiscuous mode [ 64.063568][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.073275][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.081798][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.106373][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.139267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.148306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.164090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.180546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.195968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.211019][ T4188] device veth0_vlan entered promiscuous mode [ 64.217631][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.230092][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.260875][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.279748][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.298840][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.312620][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.321678][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.333024][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.342535][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.351176][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.367590][ T4188] device veth1_vlan entered promiscuous mode [ 64.377230][ T4198] device veth0_vlan entered promiscuous mode [ 64.386559][ T4187] device veth0_macvtap entered promiscuous mode [ 64.421671][ T4198] device veth1_vlan entered promiscuous mode [ 64.440919][ T4187] device veth1_macvtap entered promiscuous mode [ 64.448206][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.460486][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.469183][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.477217][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.485695][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.493938][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.501830][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.517207][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.542450][ T4188] device veth0_macvtap entered promiscuous mode [ 64.552674][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.563835][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.573620][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.582451][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.607472][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.620934][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.631225][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.649808][ T4188] device veth1_macvtap entered promiscuous mode [ 64.675665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.684736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.696041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.706399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.715780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.725279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.734307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.746519][ T4198] device veth0_macvtap entered promiscuous mode [ 64.762561][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.777462][ T4196] device veth0_vlan entered promiscuous mode [ 64.798764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.806918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.816663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.826916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.835913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.844825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.853354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.864184][ T4198] device veth1_macvtap entered promiscuous mode [ 64.875321][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.885103][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.894643][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.904143][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.928249][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.940883][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.952385][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.970343][ T4196] device veth1_vlan entered promiscuous mode [ 64.980165][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.988267][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.996752][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.005688][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.016616][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.025592][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.034697][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.043980][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.058276][ T4189] device veth0_vlan entered promiscuous mode [ 65.074901][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.085594][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.096128][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.106951][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.120324][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.128829][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.143285][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.154879][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.180475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.189436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.198289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.207760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.217244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.232230][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.243077][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.257548][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.268565][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.297949][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.309737][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.319181][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.332200][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.341361][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.356322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.369737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.383072][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.392812][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.401574][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.411923][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.432409][ T4189] device veth1_vlan entered promiscuous mode [ 65.500632][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.509250][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.519419][ T4196] device veth0_macvtap entered promiscuous mode [ 65.573909][ T4196] device veth1_macvtap entered promiscuous mode [ 65.588753][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.597195][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.605295][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.614319][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.627067][ T4189] device veth0_macvtap entered promiscuous mode [ 65.653165][ T428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.670475][ T428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.680997][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.695940][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.706202][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.716767][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.726854][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.737560][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.750180][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.761662][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.773969][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.784168][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.796072][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.806224][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.818609][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.823241][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 65.830245][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.835228][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 65.848408][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 65.848481][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.863091][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.870972][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.879719][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.888256][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.897425][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.905837][ T4176] Bluetooth: hci3: command 0x040f tx timeout [ 65.912188][ T4176] Bluetooth: hci4: command 0x040f tx timeout [ 65.919151][ T4189] device veth1_macvtap entered promiscuous mode [ 65.936948][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.947252][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.956364][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.965760][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.040457][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.050367][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.052440][ T428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.061006][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.072889][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.078598][ T428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.091158][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.102617][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.112705][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.123181][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.133629][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.144337][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.155690][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.170019][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.182054][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.203583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.213154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.222505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.231168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.240582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.249975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.259054][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.270495][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.280665][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.297846][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.310101][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.320926][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.331050][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.343584][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.355187][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.382256][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.388618][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.401452][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.403247][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.420148][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.430645][ T428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.435729][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.450570][ T428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.461232][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.470363][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.479958][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.503435][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.650522][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.680134][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.716705][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.819306][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.819492][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.850996][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.868118][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.877302][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.885866][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.894968][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.940005][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.982691][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.179884][ T4283] loop4: detected capacity change from 0 to 1764 [ 67.287869][ T4285] loop0: detected capacity change from 0 to 512 [ 67.357191][ T4285] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.527713][ T4285] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.9: bad orphan inode 13 [ 67.549574][ T4285] ext4_test_bit(bit=12, block=18) = 1 [ 67.554996][ T4285] is_bad_inode(inode)=0 [ 67.561286][ T4285] NEXT_ORPHAN(inode)=0 [ 67.579555][ T4285] max_ino=32 [ 67.606509][ T4285] i_nlink=1 [ 67.638678][ T4285] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.728152][ T4285] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 67.737831][ T4302] tipc: Started in network mode [ 67.794579][ T4302] tipc: Node identity 1ac57fc5356e, cluster identity 4711 [ 67.796367][ T4304] loop4: detected capacity change from 0 to 512 [ 67.810021][ T4285] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.9: bg 0: block 248: padding at end of block bitmap is not set [ 67.834394][ T4302] tipc: Enabled bearer , priority 0 [ 67.845197][ T4307] device syzkaller0 entered promiscuous mode [ 67.866275][ T4304] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 67.877469][ T4285] Quota error (device loop0): write_blk: dquota write failed [ 67.887876][ T4285] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 67.898427][ T4299] Bluetooth: hci2: command 0x0419 tx timeout [ 67.904773][ T4299] Bluetooth: hci1: command 0x0419 tx timeout [ 67.910938][ T4299] Bluetooth: hci0: command 0x0419 tx timeout [ 67.914122][ T4285] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.9: Failed to acquire dquot type 1 [ 67.918138][ T4305] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 67.940463][ T4305] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 67.950572][ T4305] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.9: Failed to acquire dquot type 1 [ 67.970054][ T4304] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.984990][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 67.991246][ T4299] Bluetooth: hci3: command 0x0419 tx timeout [ 68.046483][ T4285] syz.0.9 (4285) used greatest stack depth: 20448 bytes left [ 68.131080][ T144] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6) [ 68.149680][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 1 [ 68.197461][ T4302] tipc: Resetting bearer [ 68.257191][ T4300] tipc: Resetting bearer [ 68.310598][ T4300] tipc: Disabling bearer [ 68.337281][ T4328] loop0: detected capacity change from 0 to 512 [ 68.385811][ T4328] EXT4-fs (loop0): Ignoring removed bh option [ 68.403156][ T4328] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 68.837281][ T4328] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.14: inode has both inline data and extents flags [ 69.075604][ T4328] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.14: couldn't read orphan inode 15 (err -117) [ 69.178101][ T4328] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000009,acl,data_err=ignore,bh,nomblk_io_submit,,errors=continue. Quota mode: none. [ 69.340500][ T4328] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.14: Directory hole found for htree leaf block 0 [ 69.468710][ T4346] tipc: Started in network mode [ 69.473625][ T4346] tipc: Node identity 4, cluster identity 4711 [ 69.492303][ T4346] tipc: Node number set to 4 [ 69.613005][ T4349] loop3: detected capacity change from 0 to 1024 [ 69.697748][ T4353] loop1: detected capacity change from 0 to 512 [ 69.707872][ T4349] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 69.707959][ T4349] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.731736][ T4357] loop4: detected capacity change from 0 to 256 [ 69.733143][ T4349] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 69.733242][ T4349] System zones: 0-1, 3-36 [ 69.746268][ T4349] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,nobarrier,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 69.850093][ T4357] ======================================================= [ 69.850093][ T4357] WARNING: The mand mount option has been deprecated and [ 69.850093][ T4357] and is ignored by this kernel. Remove the mand [ 69.850093][ T4357] option from the mount to silence this warning. [ 69.850093][ T4357] ======================================================= [ 69.923616][ T4353] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.047601][ T4357] FAT-fs (loop4): Directory bread(block 64) failed [ 70.047657][ T4357] FAT-fs (loop4): Directory bread(block 65) failed [ 70.047729][ T4357] FAT-fs (loop4): Directory bread(block 66) failed [ 70.047759][ T4357] FAT-fs (loop4): Directory bread(block 67) failed [ 70.047824][ T4357] FAT-fs (loop4): Directory bread(block 68) failed [ 70.047853][ T4357] FAT-fs (loop4): Directory bread(block 69) failed [ 70.047915][ T4357] FAT-fs (loop4): Directory bread(block 70) failed [ 70.047944][ T4357] FAT-fs (loop4): Directory bread(block 71) failed [ 70.048011][ T4357] FAT-fs (loop4): Directory bread(block 72) failed [ 70.048041][ T4357] FAT-fs (loop4): Directory bread(block 73) failed [ 70.784382][ T4357] attempt to access beyond end of device [ 70.784382][ T4357] loop4: rw=524288, want=1772, limit=256 [ 70.784529][ T4357] attempt to access beyond end of device [ 70.784529][ T4357] loop4: rw=0, want=1772, limit=256 [ 70.785610][ T26] audit: type=1800 audit(1786116236.523:2): pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.25" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 71.339920][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.340075][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.018223][ T4377] loop3: detected capacity change from 0 to 764 [ 72.054067][ T4377] Symlink component flag not implemented [ 72.082842][ T4379] loop0: detected capacity change from 0 to 128 [ 72.105811][ T4377] Symlink component flag not implemented [ 72.176079][ T4379] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 72.210950][ T4379] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.323907][ T4385] loop3: detected capacity change from 0 to 128 [ 72.434157][ T4385] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.503057][ T4385] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.572064][ T4388] loop0: detected capacity change from 0 to 512 [ 72.659759][ T4388] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 72.667959][ T4388] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 72.756391][ T4388] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #13: comm syz.0.33: inode has both inline data and extents flags [ 72.906852][ T4388] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.33: couldn't read orphan inode 13 (err -117) [ 72.990111][ T4388] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,jqfmt=vfsv0,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 73.105869][ T4388] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 73.139137][ T4402] loop4: detected capacity change from 0 to 512 [ 73.155002][ T4388] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 73.175430][ T4388] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 73.194343][ T4388] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 73.299330][ T4402] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.350153][ T4402] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.411943][ T4402] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.461032][ T4402] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.488953][ T4402] EXT4-fs (loop4): 1 truncate cleaned up [ 73.503647][ T4402] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 74.250680][ T4417] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 74.880862][ T4419] Illegal XDP return value 4294967274, expect packet loss! [ 75.280285][ T4427] process 'syz.4.48' launched './file0' with NULL argv: empty string added [ 75.557521][ T4444] loop3: detected capacity change from 0 to 128 [ 75.606518][ T4444] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 75.642808][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop3 [ 75.690517][ T4450] loop4: detected capacity change from 0 to 512 [ 75.783109][ T4454] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.635683][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 76.643736][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 76.650556][ T4450] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 76.654414][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 76.666294][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 76.673837][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 76.681578][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 76.689324][ T4458] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 76.807234][ T4450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 76.820506][ T4450] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.870005][ T4450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.57: bg 0: block 15: invalid block bitmap [ 77.031968][ T4472] loop0: detected capacity change from 0 to 128 [ 77.038296][ T4450] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 77.156559][ T4450] EXT4-fs (loop4): 1 truncate cleaned up [ 77.202532][ T4450] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none. [ 77.579406][ T4487] Zero length message leads to an empty skb [ 77.789260][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 77.798524][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 77.806490][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 77.814275][ T4489] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 77.996521][ T4497] syz.1.75 uses obsolete (PF_INET,SOCK_PACKET) [ 78.034477][ T4499] loop4: detected capacity change from 0 to 164 [ 78.103892][ T4499] Unable to read rock-ridge attributes [ 78.155444][ T4499] Unable to read rock-ridge attributes [ 78.213967][ T4499] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 78.777464][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 78.786322][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 78.793810][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 78.801395][ T4521] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 79.180002][ T4523] loop0: detected capacity change from 0 to 512 [ 80.297981][ T4537] loop3: detected capacity change from 0 to 512 [ 80.315941][ T4523] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.337282][ T4523] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.483280][ T4523] Quota error (device loop0): find_tree_dqentry: Getting block too big (9 >= 6) [ 80.518043][ T4523] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 80.531267][ T4537] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 80.538957][ T4523] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.86: Failed to acquire dquot type 1 [ 80.620498][ T4537] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.234247][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 81.243090][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 81.250962][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 81.258435][ T4569] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 81.699209][ T4578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 81.768510][ T4578] openvswitch: netlink: Message has 34 unknown bytes. [ 81.813816][ T4580] loop2: detected capacity change from 0 to 512 [ 82.609877][ T4580] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 82.658101][ T4580] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.927727][ T4600] netlink: 'syz.1.108': attribute type 4 has an invalid length. [ 83.072827][ T26] audit: type=1326 audit(1786116248.813:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972d4530d9 code=0x7ffc0000 [ 83.234340][ T26] audit: type=1326 audit(1786116248.863:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f972d4530d9 code=0x7ffc0000 [ 83.388534][ T26] audit: type=1326 audit(1786116248.863:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972d4530d9 code=0x7ffc0000 [ 83.531082][ T26] audit: type=1326 audit(1786116248.863:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972d4530d9 code=0x7ffc0000 [ 83.681158][ T26] audit: type=1326 audit(1786116248.863:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f972d4530d9 code=0x7ffc0000 [ 83.792008][ T26] audit: type=1326 audit(1786116248.873:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972d4530d9 code=0x7ffc0000 [ 83.906360][ T26] audit: type=1326 audit(1786116248.873:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f972d4530d9 code=0x7ffc0000 [ 84.206266][ T26] audit: type=1326 audit(1786116248.873:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4603 comm="syz.2.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972d4530d9 code=0x7ffc0000 [ 85.059747][ T4648] loop3: detected capacity change from 0 to 512 [ 85.262895][ T4652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'. [ 85.302278][ T4648] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 85.358056][ T4648] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.411169][ T4659] loop0: detected capacity change from 0 to 128 [ 85.478990][ T4659] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 85.521756][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop0 [ 86.700531][ T23] cfg80211: failed to load regulatory.db [ 86.843009][ T4680] loop1: detected capacity change from 0 to 512 [ 86.934216][ T4680] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.129: Invalid inode bitmap blk 4 in block_group 0 [ 86.964529][ T4680] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,usrquota,noload,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 88.079409][ T4698] loop0: detected capacity change from 0 to 1024 [ 88.175677][ T4698] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.201353][ T4698] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.630697][ T4707] loop0: detected capacity change from 0 to 128 [ 88.698730][ T4707] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 88.712726][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop0 [ 89.705473][ T4718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.816049][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 89.816066][ T26] audit: type=1107 audit(1786116255.553:14): pid=4719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 90.036611][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 90.059583][ T4726] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.104378][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 90.176882][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 90.203492][ T4725] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 91.501571][ T4745] loop1: detected capacity change from 0 to 1024 [ 91.621066][ T4745] EXT4-fs (loop1): Ignoring removed orlov option [ 91.746407][ T4745] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 91.773531][ T1342] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.871019][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.031979][ T1342] usb 1-1: Using ep0 maxpacket: 16 [ 92.148756][ T1342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.169762][ T1342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.230832][ T26] audit: type=1800 audit(1786116257.973:15): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.155" name="serialnumber" dev="configfs" ino=34204 res=0 errno=0 [ 92.358521][ T1342] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.390889][ T1342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.407862][ T1342] usb 1-1: Product: syz [ 92.412504][ T1342] usb 1-1: Manufacturer: syz [ 92.417212][ T1342] usb 1-1: SerialNumber: syz [ 92.548956][ T4764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.556808][ T4764] IPv6: NLM_F_CREATE should be set when creating new route [ 92.869632][ T1342] usb 1-1: 0:2 : does not exist [ 93.349870][ T1342] usb 1-1: USB disconnect, device number 2 [ 93.425320][ T26] audit: type=1326 audit(1786116259.163:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.4.159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cad1060d9 code=0x7ffc0000 [ 93.528481][ T26] audit: type=1326 audit(1786116259.243:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.4.159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f6cad1060d9 code=0x7ffc0000 [ 93.545398][ T4277] udevd[4277]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.743515][ T26] audit: type=1326 audit(1786116259.243:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.4.159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cad1060d9 code=0x7ffc0000 [ 93.773216][ T26] audit: type=1326 audit(1786116259.243:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.4.159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cad1060d9 code=0x7ffc0000 [ 93.866290][ T26] audit: type=1326 audit(1786116259.253:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.4.159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6cad1060d9 code=0x7ffc0000 [ 94.490719][ T26] audit: type=1326 audit(1786116259.253:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.4.159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cad1060d9 code=0x7ffc0000 [ 94.618431][ T26] audit: type=1326 audit(1786116259.253:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.4.159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cad1060d9 code=0x7ffc0000 [ 94.720313][ T26] audit: type=1326 audit(1786116259.253:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.4.159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6cad1060d9 code=0x7ffc0000 [ 94.840848][ T26] audit: type=1800 audit(1786116260.583:24): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.166" name="serialnumber" dev="configfs" ino=34237 res=0 errno=0 [ 94.859659][ T4606] Set syz1 is full, maxelem 65536 reached [ 95.315005][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 95.334172][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 95.370955][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 95.396537][ T4803] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 95.454163][ T4804] tipc: Started in network mode [ 95.468164][ T4804] tipc: Node identity 768f3311653a, cluster identity 4711 [ 95.477727][ T4804] tipc: Enabled bearer , priority 0 [ 95.523286][ T4805] device syzkaller0 entered promiscuous mode [ 95.562978][ T4802] tipc: Resetting bearer [ 95.599655][ T4801] tipc: Resetting bearer [ 95.621679][ T4801] tipc: Disabling bearer [ 95.862299][ T4809] device bond0 entered promiscuous mode [ 95.867899][ T4809] device bond_slave_0 entered promiscuous mode [ 95.915251][ T4809] device bond_slave_1 entered promiscuous mode [ 95.960328][ T4809] device ipvlan1 entered promiscuous mode [ 95.966892][ T4809] device ipvlan1 left promiscuous mode [ 96.019437][ T4809] device bond0 left promiscuous mode [ 96.045086][ T4809] device bond_slave_0 left promiscuous mode [ 96.065570][ T4809] device bond_slave_1 left promiscuous mode [ 97.106937][ T4821] capability: warning: `syz.0.177' uses deprecated v2 capabilities in a way that may be insecure [ 97.214624][ T26] audit: type=1800 audit(1786116262.953:25): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.178" name="serialnumber" dev="configfs" ino=35030 res=0 errno=0 [ 97.744039][ T4843] loop1: detected capacity change from 0 to 512 [ 97.813193][ T4843] EXT4-fs (loop1): invalid first ino: 0 [ 97.842366][ T4843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 97.892474][ T4843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.188'. [ 97.916619][ T4847] netlink: 'syz.0.190': attribute type 4 has an invalid length. [ 97.960966][ T4843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.188'. [ 98.023078][ T4850] netlink: 'syz.0.190': attribute type 4 has an invalid length. [ 98.058000][ T4847] netlink: 'syz.0.190': attribute type 4 has an invalid length. [ 98.173386][ T4858] loop3: detected capacity change from 0 to 2048 [ 98.211516][ T4860] tipc: Enabled bearer , priority 0 [ 98.219512][ T4860] device syzkaller0 entered promiscuous mode [ 98.252269][ T4860] tipc: Resetting bearer [ 98.269291][ T4859] tipc: Resetting bearer [ 98.299437][ T4859] tipc: Disabling bearer [ 98.309737][ T4858] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.495268][ T4198] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.865552][ T4885] loop3: detected capacity change from 0 to 512 [ 98.941425][ T4885] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.016806][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 99.040519][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 99.048968][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 99.057234][ T4892] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 99.630800][ T4885] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 99.670520][ T4885] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.782987][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 100.033790][ T4912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 100.069755][ T4912] device ip6gre1 entered promiscuous mode [ 100.314424][ T4918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.321736][ T4918] IPv6: NLM_F_CREATE should be set when creating new route [ 100.655069][ T4929] netlink: 'syz.0.222': attribute type 4 has an invalid length. [ 100.684512][ T4929] netlink: 'syz.0.222': attribute type 4 has an invalid length. [ 100.716636][ T4929] netlink: 'syz.0.222': attribute type 4 has an invalid length. [ 100.803437][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 100.816651][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 100.824930][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 100.833354][ T4932] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 101.552814][ T4947] loop0: detected capacity change from 0 to 512 [ 101.570338][ T4944] device syzkaller0 entered promiscuous mode [ 101.615566][ T4944] tipc: Enabled bearer , priority 0 [ 101.643632][ T4940] tipc: Resetting bearer [ 101.660807][ T4947] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.713345][ T4947] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.739771][ T4940] tipc: Disabling bearer [ 101.875733][ T4958] loop2: detected capacity change from 0 to 512 [ 101.945499][ T4958] EXT4-fs (loop2): invalid first ino: 0 [ 101.969640][ T4958] netlink: 56 bytes leftover after parsing attributes in process `syz.2.233'. [ 102.185295][ T4774] Set syz1 is full, maxelem 65536 reached [ 102.381747][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 102.395192][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 102.403444][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 102.411843][ T4969] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 103.049302][ T4971] netlink: 'syz.4.237': attribute type 4 has an invalid length. [ 103.077817][ T4971] netlink: 'syz.4.237': attribute type 4 has an invalid length. [ 103.140133][ T4971] netlink: 'syz.4.237': attribute type 4 has an invalid length. [ 103.212902][ T4984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.220235][ T4984] IPv6: NLM_F_CREATE should be set when creating new route [ 103.249302][ T26] audit: type=1800 audit(1786116268.993:26): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.246" name="serialnumber" dev="configfs" ino=34538 res=0 errno=0 [ 103.410991][ T4995] kvm: emulating exchange as write [ 103.721373][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 103.826480][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 103.850211][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 103.874240][ T5012] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 104.367098][ T5018] loop0: detected capacity change from 0 to 512 [ 104.404485][ T5014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.476465][ T5018] EXT4-fs (loop0): 1 truncate cleaned up [ 104.523835][ T5018] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 104.571088][ T26] audit: type=1800 audit(1786116270.303:27): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.260" name="serialnumber" dev="configfs" ino=35398 res=0 errno=0 [ 104.600404][ T5014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.687974][ T5027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'. [ 104.786574][ T5031] netlink: 'syz.2.263': attribute type 4 has an invalid length. [ 104.832552][ T5034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.839895][ T5034] IPv6: NLM_F_CREATE should be set when creating new route [ 104.878836][ T5014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.905609][ T5035] netlink: 'syz.2.263': attribute type 4 has an invalid length. [ 104.922793][ T5031] netlink: 'syz.2.263': attribute type 4 has an invalid length. [ 105.043306][ T5014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.245627][ T5014] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.297618][ T5014] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.342063][ T26] audit: type=1800 audit(1786116271.083:28): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.272" name="serialnumber" dev="configfs" ino=34743 res=0 errno=0 [ 105.358051][ T5014] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.408260][ T5014] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.610273][ T4188] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 106.464552][ T4188] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 106.501109][ T4188] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 106.504545][ T5068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.522106][ T5068] IPv6: NLM_F_CREATE should be set when creating new route [ 106.625756][ T5075] netlink: 'syz.4.281': attribute type 4 has an invalid length. [ 106.658519][ T5075] netlink: 'syz.4.281': attribute type 4 has an invalid length. [ 106.715202][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 106.737093][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 106.792428][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 106.803207][ T5076] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 107.477421][ T4739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.567488][ T26] audit: type=1800 audit(1786116273.303:29): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.288" name="serialnumber" dev="configfs" ino=35888 res=0 errno=0 [ 107.685139][ T4739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.811579][ T4739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.888507][ T5110] netlink: 'syz.4.295': attribute type 4 has an invalid length. [ 107.945793][ T5107] netlink: 'syz.4.295': attribute type 4 has an invalid length. [ 108.084735][ T4739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.511612][ T26] audit: type=1800 audit(1786116274.253:30): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.303" name="serialnumber" dev="configfs" ino=36096 res=0 errno=0 [ 108.644779][ T5137] loop3: detected capacity change from 0 to 128 [ 108.729883][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 108.761648][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.802441][ T5137] FAT-fs (loop3): Filesystem has been set read-only [ 108.809772][ T5141] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.835354][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.900018][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.930621][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.948764][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.954704][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.965219][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.973888][ T5118] device bridge_slave_0 entered promiscuous mode [ 108.988051][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.997649][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.000731][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.013332][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.019093][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.038895][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.047822][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.069355][ T5118] device bridge_slave_1 entered promiscuous mode [ 109.123729][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.134615][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.193768][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.225714][ T5158] validate_nla: 1 callbacks suppressed [ 109.225727][ T5158] netlink: 'syz.2.310': attribute type 4 has an invalid length. [ 109.233745][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.268714][ T26] audit: type=1800 audit(1786116275.003:31): pid=5168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.314" name="serialnumber" dev="configfs" ino=36217 res=0 errno=0 [ 109.282715][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.318434][ T5167] netlink: 'syz.2.310': attribute type 4 has an invalid length. [ 109.330185][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.357556][ T5172] netlink: 76 bytes leftover after parsing attributes in process `syz.1.315'. [ 109.366958][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.382834][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.387854][ T5172] netlink: 56 bytes leftover after parsing attributes in process `syz.1.315'. [ 109.395285][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.420799][ T5118] team0: Port device team_slave_0 added [ 109.432552][ T5158] netlink: 'syz.2.310': attribute type 4 has an invalid length. [ 109.449979][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.471404][ T5118] team0: Port device team_slave_1 added [ 109.545601][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.584092][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.601688][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.660964][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.667789][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.725943][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.803282][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.812361][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.846498][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.855223][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.864928][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.873614][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.882330][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.891093][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.899726][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.910419][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.307013][ T4226] Bluetooth: hci0: command 0x0409 tx timeout [ 110.387060][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.577055][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 110.591566][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.641366][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.645121][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 110.657676][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 110.665565][ T5187] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 110.696527][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.704791][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.733153][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.742594][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.756473][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.795848][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.806959][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.823902][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.832944][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.841885][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.887600][ T5137] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.925100][ T26] audit: type=1800 audit(1786116276.663:32): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.306" name="file1" dev="loop3" ino=1048594 res=0 errno=0 [ 111.266810][ T5118] device hsr_slave_0 entered promiscuous mode [ 111.405435][ T5118] device hsr_slave_1 entered promiscuous mode [ 111.550053][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.643486][ T5118] Cannot create hsr debugfs directory [ 111.875535][ T5201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.882842][ T5201] IPv6: NLM_F_CREATE should be set when creating new route [ 111.983407][ T5211] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.108870][ T26] audit: type=1800 audit(1786116277.853:33): pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.325" name="serialnumber" dev="configfs" ino=36892 res=0 errno=0 [ 112.346339][ T5118] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.381125][ T5219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.388399][ T5219] IPv6: NLM_F_CREATE should be set when creating new route [ 112.939960][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 113.211894][ T5118] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.262104][ T5118] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.305335][ T4739] device hsr_slave_0 left promiscuous mode [ 113.337458][ T4739] device hsr_slave_1 left promiscuous mode [ 113.380383][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.388796][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.414500][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.432605][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.470741][ T4739] device bridge_slave_1 left promiscuous mode [ 113.504716][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.564499][ T4739] device bridge_slave_0 left promiscuous mode [ 113.592427][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.702165][ T4739] device veth1_macvtap left promiscuous mode [ 113.726289][ T4739] device veth0_macvtap left promiscuous mode [ 113.749951][ T4739] device veth1_vlan left promiscuous mode [ 113.766737][ T4739] device veth0_vlan left promiscuous mode [ 113.992119][ T5249] usbip-vudc usbip-vudc.0: gadget not bound [ 114.248529][ T4711] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.449265][ T4711] usb 3-1: device descriptor read/64, error -71 [ 114.469448][ T4739] team0 (unregistering): Port device team_slave_1 removed [ 114.496771][ T4739] team0 (unregistering): Port device team_slave_0 removed [ 114.515605][ T4739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.560776][ T4739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.689320][ T4739] bond0 (unregistering): Released all slaves [ 114.735252][ T4711] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.781665][ T5118] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.803279][ T5264] netlink: 'syz.4.342': attribute type 4 has an invalid length. [ 114.813691][ T5265] netlink: 'syz.4.342': attribute type 4 has an invalid length. [ 114.960481][ T4711] usb 3-1: device descriptor read/64, error -71 [ 115.008533][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 115.090089][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.106074][ T4711] usb usb3-port1: attempt power cycle [ 115.141327][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.176570][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.209902][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.258588][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.267269][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.302248][ T5311] loop4: detected capacity change from 0 to 512 [ 115.315210][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.322346][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.345440][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.366589][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.376681][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.394736][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.401882][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.417475][ T5313] tipc: Enabled bearer , priority 0 [ 115.433869][ T5311] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.446619][ T5313] device syzkaller0 entered promiscuous mode [ 115.465639][ T5313] tipc: Resetting bearer [ 115.498729][ T5312] tipc: Resetting bearer [ 115.515686][ T5312] tipc: Disabling bearer [ 115.538870][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.557590][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.578389][ T4711] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.596262][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.645760][ T5321] netlink: 580 bytes leftover after parsing attributes in process `syz.3.359'. [ 115.664515][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.690756][ T4711] usb 3-1: device descriptor read/8, error -71 [ 115.720576][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.745550][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.765277][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.790803][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.807257][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.833675][ T5118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.892581][ T5328] netlink: 'syz.3.360': attribute type 4 has an invalid length. [ 115.917236][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.929913][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.946133][ T5330] netlink: 'syz.3.360': attribute type 4 has an invalid length. [ 115.969442][ T5325] netlink: 'syz.3.360': attribute type 4 has an invalid length. [ 115.978576][ T4711] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.078710][ T4711] usb 3-1: device descriptor read/8, error -71 [ 116.214708][ T4711] usb usb3-port1: unable to enumerate USB device [ 116.316578][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.364250][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.583435][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.090594][ T4711] Bluetooth: hci0: command 0x0419 tx timeout [ 117.457802][ T5371] tipc: Enabled bearer , priority 0 [ 117.491726][ T5371] tipc: Resetting bearer [ 117.526651][ T5378] netlink: 'syz.4.374': attribute type 3 has an invalid length. [ 117.546933][ T5380] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 117.612403][ T5369] tipc: Disabling bearer [ 117.663571][ T5380] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 117.727702][ T5380] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 117.956407][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.005778][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.120924][ T5118] device veth0_vlan entered promiscuous mode [ 118.128589][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.194461][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.304626][ T5118] device veth1_vlan entered promiscuous mode [ 118.346725][ T5118] device veth0_macvtap entered promiscuous mode [ 118.365170][ T5118] device veth1_macvtap entered promiscuous mode [ 118.409898][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.424132][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.528603][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.102270][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.133225][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.149393][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.169743][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.198885][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.241463][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.340614][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.370754][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.397443][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.424231][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.468503][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.488702][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.508336][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.531317][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.560269][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 119.569107][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 119.585729][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.593286][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.644317][ T5418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.711064][ T5437] netlink: 'syz.1.390': attribute type 4 has an invalid length. [ 119.742333][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 119.751021][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 119.758404][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 119.765745][ T5428] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 119.786521][ T5432] tipc: Enabled bearer , priority 0 [ 119.806953][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.825856][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.850114][ T5439] validate_nla: 2 callbacks suppressed [ 119.850129][ T5439] netlink: 'syz.2.391': attribute type 3 has an invalid length. [ 119.872744][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.887994][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.909886][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.933633][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.955050][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.995729][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.017087][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.035586][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.056630][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.077441][ T5432] tipc: Disabling bearer [ 120.109382][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.147190][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.172553][ T5118] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.226901][ T5118] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.266586][ T5118] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.295980][ T5118] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.447809][ T5461] loop1: detected capacity change from 0 to 256 [ 120.607630][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.643346][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.732768][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.799748][ T428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.825310][ T428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.899270][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.935127][ T5478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'. [ 120.944624][ T5475] loop4: detected capacity change from 0 to 512 [ 121.007658][ T5478] device ip6gre1 entered promiscuous mode [ 121.041578][ T5485] netlink: 'syz.3.406': attribute type 4 has an invalid length. [ 121.070487][ T5485] netlink: 'syz.3.406': attribute type 4 has an invalid length. [ 121.088027][ T5475] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 121.100674][ T5485] netlink: 'syz.3.406': attribute type 4 has an invalid length. [ 121.154076][ T5475] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.187026][ T5494] tipc: Enabled bearer , priority 0 [ 121.208948][ T5494] tipc: Resetting bearer [ 121.218615][ T5493] tipc: Disabling bearer [ 121.242088][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.267774][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.289709][ T4232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.518206][ T4264] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.657675][ T5515] device syzkaller0 entered promiscuous mode [ 121.781769][ T5524] netlink: 'syz.4.420': attribute type 4 has an invalid length. [ 121.833636][ T5524] netlink: 'syz.4.420': attribute type 4 has an invalid length. [ 121.897227][ T5524] netlink: 'syz.4.420': attribute type 4 has an invalid length. [ 121.915816][ T5532] loop2: detected capacity change from 0 to 512 [ 122.113713][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 122.122540][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 122.130097][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 122.137489][ T5544] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 122.154684][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.165653][ T5532] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 122.209781][ T5532] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.543600][ T5563] netlink: 164 bytes leftover after parsing attributes in process `syz.1.430'. [ 122.723416][ T428] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.870795][ T428] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.939643][ T428] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.017745][ T5578] netlink: 'syz.2.437': attribute type 4 has an invalid length. [ 123.072806][ T5582] loop4: detected capacity change from 0 to 1024 [ 123.078600][ T428] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.129674][ T5576] netlink: 'syz.2.437': attribute type 4 has an invalid length. [ 123.159130][ T5576] netlink: 'syz.2.437': attribute type 4 has an invalid length. [ 123.162800][ T5584] Invalid argument reading file caps for ./file0 [ 123.251122][ T5582] EXT4-fs (loop4): Ignoring removed bh option [ 123.337365][ T5582] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,nombcache,bsddf,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: none. [ 123.810892][ T5610] netlink: 144 bytes leftover after parsing attributes in process `syz.1.445'. [ 124.134674][ T5628] loop4: detected capacity change from 0 to 128 [ 124.212371][ T5628] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 124.229786][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop4 [ 124.399193][ T5637] device syzkaller0 entered promiscuous mode [ 125.141983][ T5587] chnl_net:caif_netlink_parms(): no params data found [ 125.332102][ T4711] Bluetooth: hci0: command 0x0409 tx timeout [ 125.409293][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.576142][ T5675] loop2: detected capacity change from 0 to 256 [ 125.776110][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.788492][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.817262][ T5587] device bridge_slave_0 entered promiscuous mode [ 125.855583][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.892026][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.921351][ T5587] device bridge_slave_1 entered promiscuous mode [ 126.035607][ T5682] netlink: 'syz.4.466': attribute type 4 has an invalid length. [ 126.074634][ T5686] netlink: 'syz.4.466': attribute type 4 has an invalid length. [ 126.131633][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 126.238257][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 126.435884][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 126.829892][ T5685] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 126.972638][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.263588][ T5702] device syzkaller0 entered promiscuous mode [ 127.296088][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.381722][ T5587] team0: Port device team_slave_0 added [ 127.408579][ T4711] Bluetooth: hci0: command 0x041b tx timeout [ 127.430219][ T5587] team0: Port device team_slave_1 added [ 127.517630][ T428] device hsr_slave_0 left promiscuous mode [ 127.553114][ T428] device hsr_slave_1 left promiscuous mode [ 127.577145][ T428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.601999][ T428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.619216][ T428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.635579][ T428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.665821][ T428] device bridge_slave_1 left promiscuous mode [ 127.691247][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.728215][ T428] device bridge_slave_0 left promiscuous mode [ 127.747680][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.769625][ T5731] loop3: detected capacity change from 0 to 128 [ 127.781621][ T428] device veth1_macvtap left promiscuous mode [ 127.799955][ T428] device veth0_macvtap left promiscuous mode [ 127.807317][ T428] device veth1_vlan left promiscuous mode [ 127.813448][ T5731] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 127.822141][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop3 [ 127.828104][ T428] device veth0_vlan left promiscuous mode [ 128.781198][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 128.899491][ T428] team0 (unregistering): Port device team_slave_1 removed [ 128.924834][ T428] team0 (unregistering): Port device team_slave_0 removed [ 128.942524][ T428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.957700][ T428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.027496][ T428] bond0 (unregistering): Released all slaves [ 129.078903][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.095946][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.127385][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.146139][ T5734] netlink: 'syz.1.478': attribute type 4 has an invalid length. [ 129.168505][ T5735] netlink: 'syz.1.478': attribute type 4 has an invalid length. [ 129.207182][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.224628][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.257561][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.488445][ T3519] Bluetooth: hci0: command 0x040f tx timeout [ 130.440550][ T5587] device hsr_slave_0 entered promiscuous mode [ 130.468665][ T5587] device hsr_slave_1 entered promiscuous mode [ 130.529847][ T5775] loop3: detected capacity change from 0 to 128 [ 130.537151][ T5587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.550645][ T5775] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 130.559167][ T5587] Cannot create hsr debugfs directory [ 130.578973][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop3 [ 130.587755][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.028853][ T5785] netlink: 'syz.2.500': attribute type 4 has an invalid length. [ 131.303364][ T5787] netlink: 'syz.2.500': attribute type 4 has an invalid length. [ 131.608825][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 131.653218][ T5798] loop2: detected capacity change from 0 to 512 [ 131.789584][ T5798] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 131.789656][ T5798] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 131.801697][ T5798] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #13: comm syz.2.495: inode has both inline data and extents flags [ 131.802449][ T5798] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.495: couldn't read orphan inode 13 (err -117) [ 131.803440][ T5798] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,jqfmt=vfsv0,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 131.812595][ T5798] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 131.852218][ T5803] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 131.869197][ T5798] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 131.942003][ T5587] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 131.967682][ T5587] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 131.978655][ T5587] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 132.012106][ T5587] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 132.043250][ T5798] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 132.043669][ T5798] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 132.070901][ T5810] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.272781][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.484460][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.536878][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.540765][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.629691][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.650411][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.715454][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.722629][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.771936][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.778922][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.846009][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.864561][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.973703][ T5829] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 133.144902][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.344605][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.351786][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.550887][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.733639][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.756864][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.036275][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.048430][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.089011][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.163931][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.259285][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.293673][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.302330][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.315132][ T5587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.337006][ T5837] netlink: 'syz.1.505': attribute type 4 has an invalid length. [ 134.387325][ T5848] loop3: detected capacity change from 0 to 764 [ 134.411538][ T5838] netlink: 'syz.1.505': attribute type 4 has an invalid length. [ 134.453315][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.479048][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.520341][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 134.863492][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.894532][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.918929][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.238298][ C1] sched: RT throttling activated [ 136.496977][ T5884] loop4: detected capacity change from 0 to 1764 [ 136.594963][ T5887] capability: warning: `syz.2.517' uses 32-bit capabilities (legacy support in use) [ 136.678979][ T5884] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 136.741986][ T5890] program syz.2.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.989813][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.012964][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.080426][ T5895] loop1: detected capacity change from 0 to 128 [ 137.108211][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.141769][ T5895] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.156708][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.207077][ T5587] device veth0_vlan entered promiscuous mode [ 137.261329][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.332941][ T5895] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.357692][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.386972][ T5903] netlink: 'syz.2.522': attribute type 4 has an invalid length. [ 137.465099][ T5587] device veth1_vlan entered promiscuous mode [ 137.489902][ T5907] netlink: 'syz.2.522': attribute type 4 has an invalid length. [ 137.551038][ T5903] netlink: 'syz.2.522': attribute type 4 has an invalid length. [ 137.637265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.647489][ T5913] loop3: detected capacity change from 0 to 164 [ 137.665890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.699130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.718915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.829109][ T5913] Unable to read rock-ridge attributes [ 137.862745][ T5913] Unable to read rock-ridge attributes [ 137.912311][ T5587] device veth0_macvtap entered promiscuous mode [ 137.920828][ T5913] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 137.936542][ T5587] device veth1_macvtap entered promiscuous mode [ 138.011882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.024012][ T5916] loop4: detected capacity change from 0 to 8192 [ 138.041393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.065593][ T5924] loop2: detected capacity change from 0 to 512 [ 138.097527][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.099446][ T26] audit: type=1804 audit(1786116303.833:34): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.526" name="/newroot/102/file0/bus" dev="loop4" ino=1048599 res=1 errno=0 [ 138.128317][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.157669][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.203625][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.233700][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.270261][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.310044][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.329245][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.360831][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.408547][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.435129][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.501895][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.563007][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.594760][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.613346][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.623519][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.635174][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.645205][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.655668][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.667367][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.679826][ T5587] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.688598][ T5587] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.697294][ T5587] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.706482][ T5587] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.776817][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.816033][ T5938] loop1: detected capacity change from 0 to 512 [ 138.826142][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.059636][ T5938] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 139.082986][ T5938] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 139.088454][ T5938] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.209514][ T5938] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.533: bg 0: block 15: invalid block bitmap [ 139.216050][ T5938] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 139.225507][ T5938] EXT4-fs (loop1): 1 truncate cleaned up [ 139.225850][ T5938] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none. [ 140.245169][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.532'. [ 140.310345][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.318165][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.427319][ T4583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.443034][ T4583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.672356][ T5956] netlink: 'syz.3.538': attribute type 4 has an invalid length. [ 140.718251][ T5956] netlink: 'syz.3.538': attribute type 4 has an invalid length. [ 140.772723][ T5956] netlink: 'syz.3.538': attribute type 4 has an invalid length. [ 141.169480][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.227892][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.292994][ T5973] loop1: detected capacity change from 0 to 128 [ 141.395268][ T5973] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 141.435948][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop1 [ 141.553155][ T5983] loop4: detected capacity change from 0 to 1024 [ 141.643064][ T5983] EXT4-fs (loop4): Ignoring removed orlov option [ 141.712759][ T5983] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 141.781301][ T26] audit: type=1804 audit(1786116307.523:35): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.545" name="/newroot/105/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 142.047479][ T6006] netlink: 'syz.3.549': attribute type 4 has an invalid length. [ 142.088878][ T6006] netlink: 'syz.3.549': attribute type 4 has an invalid length. [ 142.206636][ T6006] netlink: 'syz.3.549': attribute type 4 has an invalid length. [ 142.647245][ T6045] loop3: detected capacity change from 0 to 128 [ 142.753959][ T6045] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 142.899871][ T6055] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 143.567932][ T6059] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 143.710649][ T6061] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 144.053215][ T6080] loop3: detected capacity change from 0 to 512 [ 144.112978][ T6083] netlink: 64 bytes leftover after parsing attributes in process `syz.4.567'. [ 144.319092][ T6080] EXT4-fs (loop3): 1 orphan inode deleted [ 144.327255][ T6080] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 144.342262][ T6080] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.570073][ T6102] loop3: detected capacity change from 0 to 128 [ 144.601067][ T6102] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 144.618399][ T6105] netlink: 'syz.1.578': attribute type 4 has an invalid length. [ 144.636572][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop3 [ 144.674930][ T6108] netlink: 'syz.1.578': attribute type 4 has an invalid length. [ 144.752090][ T6105] netlink: 'syz.1.578': attribute type 4 has an invalid length. [ 144.778642][ T4232] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.028587][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 145.148677][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.176084][ T4232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.424428][ T4232] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.448380][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.456410][ T4232] usb 3-1: Product: syz [ 145.482025][ T4232] usb 3-1: Manufacturer: syz [ 145.486670][ T4232] usb 3-1: SerialNumber: syz [ 145.600868][ T6143] netlink: 'syz.4.590': attribute type 4 has an invalid length. [ 145.624685][ T6143] netlink: 'syz.4.590': attribute type 4 has an invalid length. [ 145.760313][ T6143] netlink: 'syz.4.590': attribute type 4 has an invalid length. [ 145.839638][ T4232] usb 3-1: 0:2 : does not exist [ 145.863001][ T6155] tipc: Started in network mode [ 145.868478][ T6155] tipc: Node identity 0ea910bed18f, cluster identity 4711 [ 145.887617][ T4232] usb 3-1: USB disconnect, device number 6 [ 145.912644][ T6155] tipc: Enabled bearer , priority 0 [ 146.002528][ T6149] tipc: Disabling bearer [ 146.160750][ T4277] udevd[4277]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.200458][ T6177] loop4: detected capacity change from 0 to 128 [ 146.235232][ T6177] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 146.261781][ T4260] udevd[4260]: incorrect ext4 checksum on /dev/loop4 [ 146.777169][ T6195] netlink: 'syz.6.606': attribute type 4 has an invalid length. [ 146.854131][ T6201] netlink: 'syz.6.606': attribute type 4 has an invalid length. [ 146.877047][ T6200] tipc: Enabled bearer , priority 0 [ 146.981551][ T6196] tipc: Disabling bearer [ 147.185188][ T6212] loop2: detected capacity change from 0 to 1024 [ 147.264343][ T6212] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.340597][ T6212] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.547401][ T6232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.623714][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.6.618'. [ 147.963421][ T6249] loop6: detected capacity change from 0 to 128 [ 148.152235][ T6249] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 148.672686][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop6 [ 149.280332][ T6261] tipc: Enabled bearer , priority 0 [ 149.458056][ T6258] tipc: Disabling bearer [ 149.921872][ T6282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.254565][ T6291] loop2: detected capacity change from 0 to 128 [ 150.453290][ T6291] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 150.635435][ T6295] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 151.037585][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.293832][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop2 [ 151.326363][ T6306] loop3: detected capacity change from 0 to 128 [ 151.612417][ T6319] tipc: Enabling of bearer rejected, failed to enable media [ 151.664839][ T6320] attempt to access beyond end of device [ 151.664839][ T6320] loop3: rw=2049, want=186, limit=128 [ 151.703866][ T6306] attempt to access beyond end of device [ 151.703866][ T6306] loop3: rw=2049, want=170, limit=128 [ 151.765834][ T6306] attempt to access beyond end of device [ 151.765834][ T6306] loop3: rw=2049, want=202, limit=128 [ 151.778768][ T6320] attempt to access beyond end of device [ 151.778768][ T6320] loop3: rw=2049, want=218, limit=128 [ 151.919971][ T6306] attempt to access beyond end of device [ 151.919971][ T6306] loop3: rw=2049, want=250, limit=128 [ 152.903357][ T6357] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 153.525865][ T26] audit: type=1800 audit(1786116319.243:36): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.650" name="serialnumber" dev="configfs" ino=41163 res=0 errno=0 [ 153.794610][ T6369] loop2: detected capacity change from 0 to 512 [ 153.847821][ T6372] tipc: Enabling of bearer rejected, failed to enable media [ 153.899230][ T6373] validate_nla: 4 callbacks suppressed [ 153.899246][ T6373] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 153.925754][ T6373] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 153.955859][ T6373] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 154.651350][ T6369] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,data_err=abort,norecovery,delalloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 154.685595][ T6369] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.762659][ T6369] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.652: corrupted inode contents [ 154.788523][ T6369] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.652: mark_inode_dirty error [ 154.867740][ T6369] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.652: corrupted inode contents [ 154.984528][ T6369] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.652: mark_inode_dirty error [ 155.020555][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.437292][ T6408] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 156.150456][ T26] audit: type=1800 audit(1786116318.900:37): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.663" name="serialnumber" dev="configfs" ino=40652 res=0 errno=0 [ 156.335619][ T6424] netlink: 64 bytes leftover after parsing attributes in process `syz.6.664'. [ 156.425246][ T6429] netlink: 'syz.4.669': attribute type 4 has an invalid length. [ 156.443674][ T6429] netlink: 'syz.4.669': attribute type 4 has an invalid length. [ 156.484895][ T6429] netlink: 'syz.4.669': attribute type 4 has an invalid length. [ 156.585397][ T6433] tipc: Enabling of bearer rejected, failed to enable media [ 156.993300][ T6455] loop4: detected capacity change from 0 to 128 [ 157.196117][ T6455] attempt to access beyond end of device [ 157.196117][ T6455] loop4: rw=2049, want=250, limit=128 [ 158.010632][ T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 158.308376][ T13] usb 7-1: Using ep0 maxpacket: 16 [ 158.428542][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.450127][ T13] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.461145][ T6492] netlink: 'syz.4.682': attribute type 4 has an invalid length. [ 158.478709][ T6492] netlink: 'syz.4.682': attribute type 4 has an invalid length. [ 158.483691][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.684'. [ 158.504268][ T6492] netlink: 'syz.4.682': attribute type 4 has an invalid length. [ 158.571388][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 158.606843][ T6500] tipc: Enabling of bearer rejected, failed to enable media [ 158.628705][ T13] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.644379][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.658962][ T6505] loop1: detected capacity change from 0 to 512 [ 158.665392][ T13] usb 7-1: Product: syz [ 158.669922][ T13] usb 7-1: Manufacturer: syz [ 158.674536][ T13] usb 7-1: SerialNumber: syz [ 158.762508][ T6505] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,data_err=abort,norecovery,delalloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 158.787777][ T6505] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.826426][ T6505] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.688: corrupted inode contents [ 158.850542][ T6505] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.688: mark_inode_dirty error [ 158.862572][ T6505] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.688: corrupted inode contents [ 158.874853][ T6505] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.688: mark_inode_dirty error [ 158.941439][ T6518] device bond0 entered promiscuous mode [ 158.955030][ T6518] device bond_slave_0 entered promiscuous mode [ 158.961949][ T6518] device bond_slave_1 entered promiscuous mode [ 158.970532][ T6518] device ipvlan1 entered promiscuous mode [ 158.977579][ T6518] device ipvlan1 left promiscuous mode [ 158.986023][ T6518] device bond0 left promiscuous mode [ 158.991475][ T6518] device bond_slave_0 left promiscuous mode [ 158.997494][ T6518] device bond_slave_1 left promiscuous mode [ 159.003902][ T13] usb 7-1: 0:2 : does not exist [ 159.032963][ T13] usb 7-1: USB disconnect, device number 2 [ 159.942041][ T6525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.996610][ T6528] loop2: detected capacity change from 0 to 128 [ 160.100384][ T4277] udevd[4277]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.146917][ T6528] attempt to access beyond end of device [ 160.146917][ T6528] loop2: rw=2049, want=250, limit=128 [ 160.174956][ T6538] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 160.192342][ T6538] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 160.236701][ T6538] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 160.561312][ T6547] tipc: Enabled bearer , priority 0 [ 160.575694][ T6547] device syzkaller0 entered promiscuous mode [ 160.619357][ T6550] loop3: detected capacity change from 0 to 512 [ 160.738525][ T6554] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 160.882949][ T6555] syzkaller0: mtu less than device minimum [ 161.133093][ T6550] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,data_err=abort,norecovery,delalloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 161.308487][ T6550] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.411389][ T6550] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.700: corrupted inode contents [ 161.451068][ T6561] device bond0 entered promiscuous mode [ 161.456655][ T6561] device bond_slave_0 entered promiscuous mode [ 161.483466][ T6561] device bond_slave_1 entered promiscuous mode [ 161.498406][ T6550] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.700: mark_inode_dirty error [ 161.524366][ T6561] device ipvlan1 entered promiscuous mode [ 161.553690][ T6561] device ipvlan1 left promiscuous mode [ 161.589678][ T6561] device bond0 left promiscuous mode [ 161.590552][ T6550] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.700: corrupted inode contents [ 161.595199][ T6561] device bond_slave_0 left promiscuous mode [ 161.612961][ T6550] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.700: mark_inode_dirty error [ 161.624732][ T6561] device bond_slave_1 left promiscuous mode [ 161.640748][ T6565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.680580][ T4232] tipc: Node number set to 330642193 [ 161.904057][ T6578] loop6: detected capacity change from 0 to 512 [ 162.001235][ T6578] EXT4-fs (loop6): invalid first ino: 0 [ 162.368765][ T3519] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 162.544752][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.710'. [ 162.650395][ T6578] netlink: 40 bytes leftover after parsing attributes in process `syz.6.710'. [ 162.662939][ T6578] netlink: 40 bytes leftover after parsing attributes in process `syz.6.710'. [ 162.728612][ T3519] usb 4-1: Using ep0 maxpacket: 16 [ 162.858624][ T3519] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.889134][ T3519] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.900828][ T6590] loop1: detected capacity change from 0 to 2048 [ 162.948463][ T6590] loop1: p1 p2 p3 [ 162.948463][ T6590] p1: [ 163.038055][ T6590] loop1: p2 size 458752 extends beyond EOD, truncated [ 163.092337][ T6590] loop1: p3 start 65280 is beyond EOD, truncated [ 163.099666][ T3519] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.130266][ T3519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.288511][ T3519] usb 4-1: Product: syz [ 163.293118][ T3519] usb 4-1: Manufacturer: syz [ 163.297734][ T3519] usb 4-1: SerialNumber: syz [ 163.429576][ T6613] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 163.709550][ T3519] usb 4-1: 0:2 : does not exist [ 164.079210][ T3519] usb 4-1: USB disconnect, device number 2 [ 164.111783][ T4475] udevd[4475]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 164.119446][ T6618] tipc: Enabling of bearer rejected, already enabled [ 164.165367][ T4277] udevd[4277]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 164.245825][ T4475] udevd[4475]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 164.251367][ T4277] udevd[4277]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 164.265549][ T6621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.272821][ T6621] IPv6: NLM_F_CREATE should be set when creating new route [ 164.339346][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.371367][ T6628] syzkaller0: mtu less than device minimum [ 164.480294][ T6634] loop2: detected capacity change from 0 to 512 [ 164.509749][ T6636] netlink: 'syz.6.724': attribute type 4 has an invalid length. [ 164.544490][ T6636] netlink: 'syz.6.724': attribute type 4 has an invalid length. [ 164.562878][ T6634] EXT4-fs (loop2): invalid first ino: 0 [ 164.568991][ T6640] loop1: detected capacity change from 0 to 128 [ 164.600777][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 164.639072][ T6636] netlink: 'syz.6.724': attribute type 4 has an invalid length. [ 164.653466][ T6640] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 164.657843][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.723'. [ 164.684206][ T4475] udevd[4475]: incorrect ext4 checksum on /dev/loop1 [ 164.758829][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.723'. [ 164.806113][ T4277] udevd[4277]: incorrect ext4 checksum on /dev/loop1 [ 165.021791][ T6647] loop3: detected capacity change from 0 to 512 [ 165.671521][ T6647] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,nombcache,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 165.685881][ T6647] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.692645][ T6655] loop2: detected capacity change from 0 to 2048 [ 165.788672][ T4277] loop2: p1 p2 p3 [ 165.788672][ T4277] p1: [ 165.854990][ T4277] loop2: p2 size 458752 extends beyond EOD, truncated [ 165.988739][ T4277] loop2: p3 start 65280 is beyond EOD, truncated [ 166.063358][ T6655] loop2: p1 p2 p3 [ 166.063358][ T6655] p1: [ 166.179492][ T6673] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 166.230774][ T6655] loop2: p2 size 458752 extends beyond EOD, truncated [ 166.798991][ T6655] loop2: p3 start 65280 is beyond EOD, truncated [ 166.857644][ T6677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.887692][ T6680] loop1: detected capacity change from 0 to 128 [ 166.965866][ T6680] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 166.976924][ T6685] tipc: Enabling of bearer rejected, failed to enable media [ 167.013181][ T26] audit: type=1800 audit(1786116323.756:38): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.739" name="serialnumber" dev="configfs" ino=42141 res=0 errno=0 [ 167.192388][ T6700] loop3: detected capacity change from 0 to 512 [ 167.246389][ T3519] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 167.441800][ T6700] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 167.458685][ T6700] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.481089][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 167.492282][ T4277] udevd[4277]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 167.507092][ T26] audit: type=1800 audit(1786116324.246:39): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.740" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 167.528828][ T3519] usb 7-1: Using ep0 maxpacket: 16 [ 167.549040][ T6706] loop1: detected capacity change from 0 to 512 [ 167.632130][ T6706] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 167.658656][ T3519] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.669787][ T26] audit: type=1800 audit(1786116324.376:40): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.740" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 167.709726][ T3519] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.712422][ T4475] udevd[4475]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 167.740549][ T4277] udevd[4277]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 167.782218][ T6706] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 167.832972][ T6706] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.998583][ T3519] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.018595][ T3519] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.046786][ T3519] usb 7-1: Product: syz [ 168.061711][ T3519] usb 7-1: Manufacturer: syz [ 168.066347][ T3519] usb 7-1: SerialNumber: syz [ 168.398007][ T6739] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 168.569214][ T3519] usb 7-1: 0:2 : does not exist [ 169.001057][ T6741] loop1: detected capacity change from 0 to 512 [ 169.039638][ T3519] usb 7-1: USB disconnect, device number 3 [ 169.118713][ T6741] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.196795][ T6741] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 169.241867][ T6747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.250373][ T6741] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.293701][ T6751] loop4: detected capacity change from 0 to 512 [ 169.403278][ T6751] EXT4-fs (loop4): invalid first ino: 0 [ 169.515930][ T6751] netlink: 56 bytes leftover after parsing attributes in process `syz.4.752'. [ 169.540469][ T4260] udevd[4260]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.627459][ T6755] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 170.345926][ T26] audit: type=1326 audit(1786116327.086:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.3.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78cc340d9 code=0x7ffc0000 [ 170.387848][ T6758] tipc: Enabling of bearer rejected, already enabled [ 170.452855][ T6766] syzkaller0: mtu less than device minimum [ 170.514130][ T26] audit: type=1326 audit(1786116327.086:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.3.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78cc340d9 code=0x7ffc0000 [ 170.702976][ T6776] loop4: detected capacity change from 0 to 2048 [ 170.709987][ T26] audit: type=1326 audit(1786116327.156:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.3.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd78cc340d9 code=0x7ffc0000 [ 170.772462][ T4260] loop4: p1 p2 p3 [ 170.772462][ T4260] p1: [ 170.850904][ T26] audit: type=1326 audit(1786116327.156:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.3.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78cc340d9 code=0x7ffc0000 [ 170.858103][ T4260] loop4: p2 size 458752 extends beyond EOD, truncated [ 170.965005][ T26] audit: type=1326 audit(1786116327.156:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.3.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78cc340d9 code=0x7ffc0000 [ 170.980977][ T4260] loop4: p3 start 65280 is beyond EOD, truncated [ 171.049994][ T6776] loop4: p1 p2 p3 [ 171.049994][ T6776] p1: [ 171.112938][ T26] audit: type=1326 audit(1786116327.156:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.3.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd78cc340d9 code=0x7ffc0000 [ 171.172715][ T6776] loop4: p2 size 458752 extends beyond EOD, truncated [ 171.183693][ T6797] netlink: 'syz.2.766': attribute type 4 has an invalid length. [ 171.229765][ T6797] netlink: 'syz.2.766': attribute type 4 has an invalid length. [ 171.232602][ T6776] loop4: p3 start 65280 is beyond EOD, [ 171.240239][ T26] audit: type=1326 audit(1786116327.156:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6759 comm="syz.3.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78cc340d9 code=0x7ffc0000 [ 171.246823][ T6800] loop1: detected capacity change from 0 to 512 [ 171.284040][ T6776] truncated [ 171.339644][ T6801] device syzkaller0 entered promiscuous mode [ 171.434632][ T6801] tipc: Enabled bearer , priority 0 [ 171.581602][ T6800] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.694722][ T6799] tipc: Resetting bearer [ 171.741568][ T6799] tipc: Disabling bearer [ 171.803596][ T6814] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 172.072838][ T6812] tipc: Enabling of bearer rejected, failed to enable media [ 172.370668][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 172.411490][ T6800] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 172.429618][ T6800] EXT4-fs (loop1): 1 truncate cleaned up [ 172.435296][ T6800] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 172.459910][ T4277] udevd[4277]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 172.585473][ T6827] loop3: detected capacity change from 0 to 512 [ 172.667049][ T4277] udevd[4277]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 172.702774][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 172.997859][ T6827] EXT4-fs (loop3): invalid first ino: 0 [ 173.606334][ T6827] netlink: 56 bytes leftover after parsing attributes in process `syz.3.771'. [ 173.974993][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 173.975007][ T26] audit: type=1800 audit(1786116330.716:50): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.776" name="serialnumber" dev="configfs" ino=42344 res=0 errno=0 [ 174.600577][ T6864] autofs4:pid:6864:autofs_fill_super: called with bogus options [ 174.810693][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.818108][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.158089][ T6848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.191478][ T6848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.428403][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 175.485056][ T6848] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.494138][ T6848] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.505116][ T6848] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.514155][ T6848] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.606702][ T6848] device ip6gre1 left promiscuous mode [ 175.614229][ T6848] tipc: Resetting bearer [ 175.620153][ T4228] usb 5-1: device descriptor read/64, error -71 [ 175.626574][ T6848] device syzkaller0 left promiscuous mode [ 175.643979][ T6850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.648616][ T6848] syz.1.777 (6848) used greatest stack depth: 20272 bytes left [ 175.653199][ T6850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.669211][ T6850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.677997][ T6850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.687849][ T6850] device geneve2 entered promiscuous mode [ 175.695853][ T6857] netlink: 'syz.6.780': attribute type 4 has an invalid length. [ 175.730663][ T6881] loop1: detected capacity change from 0 to 512 [ 175.749585][ T6867] netlink: 'syz.6.780': attribute type 4 has an invalid length. [ 175.758668][ T6881] EXT4-fs (loop1): invalid first ino: 0 [ 175.773447][ T6871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.893219][ T6881] netlink: 56 bytes leftover after parsing attributes in process `syz.1.790'. [ 175.909649][ T4228] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.062794][ T6893] netlink: 144 bytes leftover after parsing attributes in process `syz.2.795'. [ 176.148434][ T4228] usb 5-1: device descriptor read/64, error -71 [ 176.280485][ T4228] usb usb5-port1: attempt power cycle [ 176.280906][ T6907] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 176.331329][ T6913] netlink: 'syz.1.802': attribute type 4 has an invalid length. [ 176.350750][ T6907] netlink: 'syz.3.799': attribute type 2 has an invalid length. [ 176.365870][ T6910] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 176.373238][ T6910] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 176.380690][ T6913] netlink: 'syz.1.802': attribute type 4 has an invalid length. [ 176.547900][ T6923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.718811][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 176.939881][ T26] audit: type=1800 audit(1786116333.686:51): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.811" name="serialnumber" dev="configfs" ino=42487 res=0 errno=0 [ 176.998647][ T4228] usb 5-1: device descriptor read/8, error -71 [ 177.018958][ T6932] loop6: detected capacity change from 0 to 8192 [ 177.096387][ T6932] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.288890][ T4228] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.419301][ T4228] usb 5-1: device descriptor read/8, error -71 [ 177.445370][ T6961] netlink: 'syz.6.817': attribute type 4 has an invalid length. [ 177.494836][ T6961] netlink: 'syz.6.817': attribute type 4 has an invalid length. [ 177.558735][ T4228] usb usb5-port1: unable to enumerate USB device [ 177.849030][ T6975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.064131][ T6980] loop4: detected capacity change from 0 to 512 [ 178.300661][ T6980] EXT4-fs (loop4): 1 truncate cleaned up [ 178.316552][ T6980] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 178.920717][ T4711] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 179.208490][ T4711] usb 7-1: Using ep0 maxpacket: 16 [ 179.330962][ T4711] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.361939][ T4711] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.560192][ T7025] [ 179.562556][ T7025] ====================================================== [ 179.569568][ T7025] WARNING: possible circular locking dependency detected [ 179.576590][ T7025] syzkaller #0 Not tainted [ 179.581001][ T7025] ------------------------------------------------------ [ 179.588012][ T7025] syz.1.834/7025 is trying to acquire lock: [ 179.593898][ T7025] ffff888062ff9028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 179.604978][ T7025] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 179.604978][ T7025] but task is already holding lock: [ 179.612350][ T7025] ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 179.622028][ T7025] [ 179.622028][ T7025] which lock already depends on the new lock. [ 179.622028][ T7025] [ 179.632427][ T7025] [ 179.632427][ T7025] the existing dependency chain (in reverse order) is: [ 179.641478][ T7025] [ 179.641478][ T7025] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 179.649482][ T7025] __mutex_lock_common+0x1e5/0x2400 [ 179.655213][ T7025] mutex_lock_nested+0x17/0x20 [ 179.660506][ T7025] rfkill_register+0x2f/0x970 [ 179.665709][ T7025] hci_register_dev+0x459/0x980 [ 179.671092][ T7025] vhci_create_device+0x32e/0x5c0 [ 179.676650][ T7025] vhci_write+0x389/0x440 [ 179.681494][ T7025] vfs_write+0x748/0xd70 [ 179.686254][ T7025] ksys_write+0x153/0x260 [ 179.691099][ T7025] do_syscall_64+0x4c/0xa0 [ 179.696034][ T7025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.702452][ T7025] [ 179.702452][ T7025] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 179.710268][ T7025] __mutex_lock_common+0x1e5/0x2400 [ 179.715994][ T7025] mutex_lock_nested+0x17/0x20 [ 179.721275][ T7025] vhci_send_frame+0x88/0x100 [ 179.726477][ T7025] hci_send_frame+0x1a9/0x2e0 [ 179.731670][ T7025] hci_tx_work+0x9b5/0x16d0 [ 179.736694][ T7025] process_one_work+0x867/0xff0 [ 179.742060][ T7025] worker_thread+0xad7/0x12a0 [ 179.747254][ T7025] kthread+0x42e/0x520 [ 179.751840][ T7025] ret_from_fork+0x1f/0x30 [ 179.756781][ T7025] [ 179.756781][ T7025] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 179.765989][ T7025] __flush_work+0x116/0x210 [ 179.771012][ T7025] hci_dev_do_close+0x201/0x1020 [ 179.776469][ T7025] hci_unregister_dev+0x2eb/0x590 [ 179.782013][ T7025] vhci_release+0x73/0xc0 [ 179.786857][ T7025] __fput+0x212/0x8c0 [ 179.791351][ T7025] task_work_run+0x125/0x1a0 [ 179.796457][ T7025] do_exit+0x635/0x2110 [ 179.801124][ T7025] do_group_exit+0x12c/0x2f0 [ 179.806226][ T7025] get_signal+0x7eb/0x12e0 [ 179.811165][ T7025] arch_do_signal_or_restart+0xe6/0x12a0 [ 179.817340][ T7025] exit_to_user_mode_loop+0x9e/0x130 [ 179.823154][ T7025] exit_to_user_mode_prepare+0xee/0x180 [ 179.829234][ T7025] syscall_exit_to_user_mode+0x16/0x40 [ 179.835223][ T7025] do_syscall_64+0x58/0xa0 [ 179.840160][ T7025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.846589][ T7025] [ 179.846589][ T7025] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 179.854240][ T7025] __mutex_lock_common+0x1e5/0x2400 [ 179.859967][ T7025] mutex_lock_nested+0x17/0x20 [ 179.865254][ T7025] bg_scan_update+0x44/0x3b0 [ 179.870372][ T7025] process_one_work+0x867/0xff0 [ 179.875752][ T7025] worker_thread+0xad7/0x12a0 [ 179.880950][ T7025] kthread+0x42e/0x520 [ 179.885535][ T7025] ret_from_fork+0x1f/0x30 [ 179.890474][ T7025] [ 179.890474][ T7025] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 179.900293][ T7025] __lock_acquire+0x2c66/0x7b50 [ 179.905675][ T7025] lock_acquire+0x19e/0x400 [ 179.910711][ T7025] __flush_work+0x116/0x210 [ 179.915737][ T7025] __cancel_work_timer+0x3f4/0x560 [ 179.921372][ T7025] hci_request_cancel_all+0xcc/0x300 [ 179.927183][ T7025] hci_dev_do_close+0x4e/0x1020 [ 179.932566][ T7025] hci_rfkill_set_block+0x101/0x180 [ 179.938286][ T7025] rfkill_set_block+0x1c1/0x3c0 [ 179.943659][ T7025] rfkill_fop_write+0x453/0x560 [ 179.949037][ T7025] vfs_write+0x304/0xd70 [ 179.953803][ T7025] ksys_write+0x153/0x260 [ 179.958658][ T7025] do_syscall_64+0x4c/0xa0 [ 179.963598][ T7025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.970018][ T7025] [ 179.970018][ T7025] other info that might help us debug this: [ 179.970018][ T7025] [ 179.980242][ T7025] Chain exists of: [ 179.980242][ T7025] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 179.980242][ T7025] [ 179.995968][ T7025] Possible unsafe locking scenario: [ 179.995968][ T7025] [ 180.003411][ T7025] CPU0 CPU1 [ 180.008768][ T7025] ---- ---- [ 180.014124][ T7025] lock(rfkill_global_mutex); [ 180.018887][ T7025] lock(&data->open_mutex); [ 180.025996][ T7025] lock(rfkill_global_mutex); [ 180.033275][ T7025] lock((work_completion)(&hdev->bg_scan_update)); [ 180.039863][ T7025] [ 180.039863][ T7025] *** DEADLOCK *** [ 180.039863][ T7025] [ 180.048001][ T7025] 1 lock held by syz.1.834/7025: [ 180.052928][ T7025] #0: ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 180.063013][ T7025] [ 180.063013][ T7025] stack backtrace: [ 180.068892][ T7025] CPU: 1 PID: 7025 Comm: syz.1.834 Not tainted syzkaller #0 [ 180.076156][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.086206][ T7025] Call Trace: [ 180.089477][ T7025] [ 180.092392][ T7025] dump_stack_lvl+0x188/0x250 [ 180.097062][ T7025] ? load_image+0x410/0x410 [ 180.101561][ T7025] ? show_regs_print_info+0x20/0x20 [ 180.106763][ T7025] ? print_circular_bug+0x12b/0x1a0 [ 180.111961][ T7025] check_noncircular+0x296/0x330 [ 180.116890][ T7025] ? look_up_lock_class+0x71/0x110 [ 180.121992][ T7025] ? add_chain_block+0x9b0/0x9b0 [ 180.126937][ T7025] ? lockdep_lock+0xf1/0x1f0 [ 180.131517][ T7025] ? __lock_acquire+0x1305/0x7b50 [ 180.136528][ T7025] ? mark_lock+0x94/0x320 [ 180.140837][ T7025] ? _find_first_zero_bit+0xd1/0xf0 [ 180.146018][ T7025] __lock_acquire+0x2c66/0x7b50 [ 180.150855][ T7025] ? verify_lock_unused+0x140/0x140 [ 180.156039][ T7025] ? verify_lock_unused+0x140/0x140 [ 180.161233][ T7025] lock_acquire+0x19e/0x400 [ 180.165719][ T7025] ? __flush_work+0xfa/0x210 [ 180.170294][ T7025] ? __lock_acquire+0x7b50/0x7b50 [ 180.175316][ T7025] ? read_lock_is_recursive+0x10/0x10 [ 180.180671][ T7025] ? start_flush_work+0x784/0x830 [ 180.185683][ T7025] __flush_work+0x116/0x210 [ 180.190167][ T7025] ? __flush_work+0xfa/0x210 [ 180.194743][ T7025] ? flush_work+0x20/0x20 [ 180.199055][ T7025] ? try_to_grab_pending+0xfb/0x820 [ 180.204233][ T7025] ? mark_lock+0x94/0x320 [ 180.208544][ T7025] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 180.214509][ T7025] ? lock_chain_count+0x20/0x20 [ 180.219342][ T7025] ? mark_lock+0x94/0x320 [ 180.223652][ T7025] ? __cancel_work_timer+0x36a/0x560 [ 180.228916][ T7025] __cancel_work_timer+0x3f4/0x560 [ 180.234010][ T7025] ? cancel_work_sync+0x20/0x20 [ 180.238842][ T7025] ? __cancel_work+0x1f9/0x2e0 [ 180.243590][ T7025] ? lockdep_hardirqs_on+0x94/0x140 [ 180.248777][ T7025] ? __cancel_work+0x27b/0x2e0 [ 180.253522][ T7025] ? cancel_work+0x20/0x20 [ 180.257918][ T7025] hci_request_cancel_all+0xcc/0x300 [ 180.263193][ T7025] hci_dev_do_close+0x4e/0x1020 [ 180.268024][ T7025] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 180.273900][ T7025] ? _raw_spin_unlock+0x40/0x40 [ 180.278731][ T7025] hci_rfkill_set_block+0x101/0x180 [ 180.283912][ T7025] ? rcu_lock_release+0x20/0x20 [ 180.288745][ T7025] rfkill_set_block+0x1c1/0x3c0 [ 180.293582][ T7025] rfkill_fop_write+0x453/0x560 [ 180.298418][ T7025] ? rfkill_fop_read+0x560/0x560 [ 180.303343][ T7025] ? common_file_perm+0x100/0x1c0 [ 180.308348][ T7025] ? fsnotify_perm+0x5d/0x560 [ 180.313005][ T7025] ? security_file_permission+0x75/0xa0 [ 180.318534][ T7025] ? rfkill_fop_read+0x560/0x560 [ 180.323455][ T7025] vfs_write+0x304/0xd70 [ 180.327679][ T7025] ? file_end_write+0x250/0x250 [ 180.332513][ T7025] ? __fget_files+0x402/0x470 [ 180.337174][ T7025] ? __fdget_pos+0x1e2/0x370 [ 180.341744][ T7025] ? ksys_write+0x70/0x260 [ 180.346143][ T7025] ksys_write+0x153/0x260 [ 180.350452][ T7025] ? __ia32_sys_read+0x80/0x80 [ 180.355198][ T7025] ? lockdep_hardirqs_on+0x94/0x140 [ 180.360378][ T7025] do_syscall_64+0x4c/0xa0 [ 180.364775][ T7025] ? clear_bhb_loop+0x30/0x80 [ 180.369431][ T7025] ? clear_bhb_loop+0x30/0x80 [ 180.374092][ T7025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.379980][ T7025] RIP: 0033:0x7f90762910d9 [ 180.384379][ T7025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.403970][ T7025] RSP: 002b:00007f90744e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.412366][ T7025] RAX: ffffffffffffffda RBX: 00007f9076518fa0 RCX: 00007f90762910d9 [ 180.420318][ T7025] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 180.428278][ T7025] RBP: 00007f9076328024 R08: 0000000000000000 R09: 0000000000000000 [ 180.436230][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.444185][ T7025] R13: 00007f9076519038 R14: 00007f9076518fa0 R15: 00007ffcdb0744b8 [ 180.452142][ T7025] [ 181.219243][ T4189] syz-executor (4189) used greatest stack depth: 20016 bytes left [ 181.238479][ T4711] usb 7-1: string descriptor 0 read error: -71 [ 181.244729][ T4711] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.259966][ T4711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.290041][ T4711] usb 7-1: can't set config #1, error -71 [ 181.313860][ T4711] usb 7-1: USB disconnect, device number 4 [ 181.953984][ T4334] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.003225][ T4334] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.053051][ T4334] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.092860][ T4334] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.191774][ T4334] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.251178][ T4334] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.302255][ T4334] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.340771][ T4334] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.425311][ T4334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.472322][ T4334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.511220][ T4334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.561981][ T4334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.656294][ T4334] tipc: Left network mode [ 182.661116][ T4334] tipc: Left network mode [ 182.665915][ T4334] tipc: Disabling bearer [ 182.673119][ T4334] tipc: Left network mode [ 183.555412][ T4334] device hsr_slave_0 left promiscuous mode [ 183.561798][ T4334] device hsr_slave_1 left promiscuous mode [ 183.568039][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.575863][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.584353][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.591945][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.599822][ T4334] device bridge_slave_1 left promiscuous mode [ 183.605983][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.614439][ T4334] device bridge_slave_0 left promiscuous mode [ 183.620749][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.632990][ T4334] device hsr_slave_0 left promiscuous mode [ 183.639211][ T4334] device hsr_slave_1 left promiscuous mode [ 183.645393][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.653658][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.661374][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.669156][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.676764][ T4334] device bridge_slave_1 left promiscuous mode [ 183.683391][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.695530][ T4334] device bridge_slave_0 left promiscuous mode [ 183.701807][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.712265][ T4334] device hsr_slave_0 left promiscuous mode [ 183.718676][ T4334] device hsr_slave_1 left promiscuous mode [ 183.724863][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.732417][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.740665][ T4334] device bridge_slave_1 left promiscuous mode [ 183.746820][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.754774][ T4334] device bridge_slave_0 left promiscuous mode [ 183.760941][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.770615][ T4334] device veth1_macvtap left promiscuous mode [ 183.776608][ T4334] device veth0_macvtap left promiscuous mode [ 183.782679][ T4334] device veth1_vlan left promiscuous mode [ 183.788711][ T4334] device veth0_vlan left promiscuous mode [ 183.794810][ T4334] device veth1_macvtap left promiscuous mode [ 183.800833][ T4334] device veth0_macvtap left promiscuous mode [ 183.806832][ T4334] device veth1_vlan left promiscuous mode [ 183.812784][ T4334] device veth0_vlan left promiscuous mode [ 183.923080][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 183.933352][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 183.943459][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.955046][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.993333][ T4334] bond0 (unregistering): Released all slaves [ 184.052803][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 184.063669][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 184.074683][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.086777][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.125554][ T4334] bond0 (unregistering): Released all slaves [ 184.203421][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 184.213984][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 184.224407][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.237276][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.272909][ T4334] bond0 (unregistering): Released all slaves